EU Data Act | Cyberismo

This page is provided in accordance with Article 28 of the EU Data Act (Regulation (EU) 2023/2854).

Jurisdiction of ICT Infrastructure

Cyberismo Cloud is hosted in data centres located within the European Union. Our primary infrastructure provider is UpCloud Ltd, a Finland-based cloud service provider. UpCloud data centres in EU used for Cyberismo Cloud are subject to Finnish and EU law. UpCloud has documented their responsibilities regarding EU Data Act at https://upcloud.com/eu-data-act/.

Cyberismo does not transfer or store customer data outside the EU/EEA in connection with the provision of Cyberismo Cloud.

Measures to prevent conflicting international access or transfer

Cyberismo does not disclose any data to any governmental authorities unless required by laws of Finland.

We have adopted the following technical, organisational, and contractual measures to prevent international governmental access to, or transfer of, non-personal data held in the Union where such access or transfer would create a conflict with Union law or the national law of Finland:

Contractual measures

Our agreements with infrastructure providers require that data processing takes place within the EU/EEA

Organisational measures

Cyberismo maintains an ISO 27001-aligned information security management system that covers the assessment and management of risks related to international data access.
We select only reliable and reputable suppliers, and we conduct a risk assessment of international data access when selecting and reviewing suppliers.

Technical measures

Customer data is protected as described in Appendix 2 of the Cyberismo Cloud Agreement (Service Description). This includes, for example, access controls to ensure that only authorised personnel and systems can access customer data in the production environment, and a segmented and automated deployment model, which limits the scope of any potential access to individual service instances.

Further information

For additional details on Cyberismo security practices, please see our Security Policy. The contractual terms applicable to Cyberismo Cloud, including provisions on data protection, sub-processors, and international transfers, are set out in the Cyberismo Cloud Agreement and its appendices.